Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cc436bea-24ae-4850-995e-0b10eb64eb7e.roa
File:                     cc436bea-24ae-4850-995e-0b10eb64eb7e.roa (raw, json)
Hash identifier:          pkzRBvwntfS2VfXvooQUd69DudDaLfL3E1gZr/QcJkU=
Subject key identifier:   C8:50:80:F1:A3:9C:F5:DD:AD:9E:D8:B2:99:41:94:DA:2D:26:6D:1F
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       708709B629287A8FC59F5CC8D69750506DD2F3E9
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cc436bea-24ae-4850-995e-0b10eb64eb7e.roa
Signing time:             Sat 22 Apr 2023 00:00:00 +0000
ROA not before:           Sat 22 Apr 2023 00:00:00 +0000
ROA not after:            Tue 25 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:87:09:b6:29:28:7a:8f:c5:9f:5c:c8:d6:97:50:50:6d:d2:f3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 22 00:00:00 2023 GMT
            Not After : Apr 25 23:59:59 2023 GMT
        Subject: serialNumber=ce43a89235c90823e40a4baa46f951f75a1b88ffccdb9440141febc24665ed3a, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c0:ac:15:7d:a7:1b:a0:6f:f7:18:6f:65:4a:
                    b7:13:a2:1f:56:a0:de:19:4e:6a:85:26:69:d0:62:
                    d8:ea:83:4d:df:bc:d8:00:62:0d:15:c6:8e:16:fc:
                    33:69:86:70:b5:1b:12:d9:5b:b0:fb:b4:ae:e2:ab:
                    f9:55:cb:b8:ad:12:89:e5:84:5a:48:78:0d:fa:06:
                    19:74:bf:be:ed:68:b1:ba:10:23:f6:80:85:c1:aa:
                    f2:3a:dd:ed:e1:26:da:1c:57:5b:6d:05:1b:85:50:
                    ff:8a:ef:70:85:c7:ee:a5:a2:04:dc:31:dd:5e:dc:
                    ef:ca:b6:c6:fd:8d:7e:39:1e:ad:a3:40:08:d4:ff:
                    7c:cd:82:70:11:03:c7:5e:fa:72:ac:14:07:4c:fa:
                    09:96:d8:8c:ab:4b:5e:b6:29:29:e8:81:c5:1e:2e:
                    00:3b:8f:c9:91:61:a2:86:10:76:cc:ee:da:c7:70:
                    15:5d:72:58:07:32:12:f8:a9:1e:51:94:35:9b:a6:
                    ac:d2:de:ab:e8:9b:59:79:a3:7b:8b:16:1b:e2:7d:
                    76:4d:81:6e:f6:a6:d5:55:16:33:59:07:40:c4:6a:
                    6d:17:b9:c7:1d:60:c8:5d:61:aa:09:68:39:63:29:
                    35:03:ae:10:ba:00:30:91:98:59:45:9c:ec:e8:63:
                    8b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:50:80:F1:A3:9C:F5:DD:AD:9E:D8:B2:99:41:94:DA:2D:26:6D:1F
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/cc436bea-24ae-4850-995e-0b10eb64eb7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:01:89:ed:1a:2e:c1:76:e0:93:92:c2:43:90:09:d1:72:0f:
         aa:6c:80:30:9d:1d:89:b2:91:b6:57:6c:66:c2:78:06:7c:f8:
         27:2c:10:ba:ed:60:78:0f:de:40:28:60:17:40:47:7c:cd:ad:
         0c:73:9d:28:63:59:7e:d3:26:f1:66:4e:73:a5:e5:87:f0:28:
         5d:3e:f6:d8:d7:09:8d:71:09:2d:22:7b:1b:db:9a:7c:d0:75:
         cf:a3:dd:52:9f:01:8f:84:11:cb:19:4b:b1:d3:d6:c1:d7:aa:
         aa:08:1f:7d:07:bb:a8:bc:1d:c5:d7:6e:c1:ff:69:ae:c0:16:
         ed:29:82:e3:d9:78:23:e8:28:b9:27:3e:96:1d:fa:4c:91:d8:
         18:d6:b9:24:f4:34:16:22:ea:2d:47:9b:94:2e:2c:56:45:b4:
         60:2c:6f:de:7d:60:f9:fc:95:9b:c1:62:24:c4:d9:54:69:5c:
         85:27:9f:0e:ad:8e:2b:5e:0b:f1:83:63:03:fd:45:91:db:db:
         86:61:3c:15:2a:37:33:ff:e5:0f:a0:90:a2:73:7e:60:20:fd:
         39:95:c1:90:a5:38:da:ca:98:0f:3c:a2:a5:b1:70:cb:1e:24:
         45:55:0f:ef:42:75:9f:b0:3f:89:41:05:f4:8d:de:ab:4e:36:
         f0:6d:97:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----